github.com/dragonflyoss/dragonfly (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/dragonflyoss/dragonfly, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (11)

• CVE-2025-59352 — CVSS 9.8 (critical): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow…
• CVE-2025-59345 — CVSS 9.1 (critical): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The /api/v1/jobs and /preheats…
• CVE-2025-59348 — CVSS 7.5 (high): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method…
• CVE-2025-59353 — CVSS 7.5 (high): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, a peer can obtain a valid TLS…
• CVE-2025-59347 — CVSS 6.5 (medium): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate…
• CVE-2025-59350 — CVSS 5.3 (medium): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access control mechanism for the…
• CVE-2025-59346 — CVSS 5.3 (medium): Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side…
• CVE-2025-59351 — CVSS 5.3 (medium): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function…
• CVE-2025-59354 — CVSS 5.3 (medium): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of…
• CVE-2025-59410 — CVSS 3.7 (low): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for…
• CVE-2025-59349 — CVSS 3.3 (low): Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll…